PUBLIC PREVIEW · THREAT MODEL

Security boundary

The node minimizes before upload, binds its collector to loopback, and signs receipts. Those controls authenticate a registered node; they do not prove independent control or execution truth.

Install safely

For normal installation, run npm install -g agentwex@0.6.3, then agentwex install. The checksummed tarball is an optional manual-verification and recovery path—not an extra requirement. The preview supports macOS and Node.js 22.13 or newer.

Enforced controls

Private local configuration permissions; hashed server API keys; Ed25519 receipt signatures; localhost bearer authentication; 64 KiB API bodies; bounded OTLP bodies; per-node and salted signup rate limits; duplicate and retry collapse; future-dated evidence exclusion; owned-release checks for route feedback; key rotation and revocation; and fail-closed handling of existing telemetry exporters.

Known limits

Public self-registration remains vulnerable to coordinated Sybil identities. Signed receipts are unverified network claims, not proof that a run happened. Reliability confidence is a freshness-and-density heuristic, savings feedback is self-reported, and research-bounty quality scores measure structural completeness rather than scientific truth. Linux service installation, independent security assessment, operational restore drills, and stronger participant identity are not yet complete. Do not use the preview as an authorization source.

Report privately

Use GitHub's private vulnerability reporting flow. Do not include credentials, prompts, customer data, or exploit details in a public issue. There is no bug bounty unless one is announced explicitly.